Catalog Files Wont Download from DMZ Depot
Posted: 22. Jun 2017, 21:10
A system connected to the external Depot server will check in, download the PM3 install from Configurator\Packages\Matrix42\PM3Client\16.1 and begin to execute. You can see the C:\EmpirumAgent\PatchManagement_v3 folder get created and the PM3.exe running in Task Manager but after 10 seconds or so it stops. If you look at the SWDepot log files you will see the below:
15.06.2017 15:21:44, Section [WriteInstallationResultMessage], Line 1:
ErrorLogMsg: Initialization failed!
Communication with Matrix42.Platform.Service.Host (UAF) is not available!
Agent template not compatible! or
Cannot download the catalog from the server! or
Check Windows Update Service, please!
If you check the log files in the C:\EmpirumAgent\PatchManagement_v3 folder you will see this:
2017-06-15 15:29:07.825 [PM3Client] Downloading Shavlik Catalogs...
2017-06-15 15:29:07.825 [PM3Download] Starting enumerate job, server uri: https://EMPIRUM.coserv.com:443/Matrix42 ... r/Packages, relative path: PatchManagement_v3\Catalog
2017-06-15 15:29:07.825 [PM3Download] Got value False for Key Matrix42.Platform.Service.Processor.Transfer.AcceptOnlyTrustedSsl
2017-06-15 15:29:07.825 [PM3Download] Got value False for Key Matrix42.Platform.Service.Processor.Transfer.UseClientCertificate
2017-06-15 15:29:07.825 [PM3Download] Got value for Key Server.ClientCertificateSerial
2017-06-15 15:29:09.028 [PM3Download] Enumerate job failed, https://empirum.coserv.com/Matrix42-Emp ... v3/Catalog. The remote server returned an error: (403) Forbidden.
Since the Shavlik catalog files cant be downloaded, extracted, and checked against by the scan mechanism the distribution failes. If the same system connects to the internal depot server there are no issues. The catalog files get pulled down to the system and all runs as expected.
it is confusing that the agent can download everything else but when it comes to the 2 catalog files it acts like it does not have access. Anyone seen this before with a DMZ depot?
15.06.2017 15:21:44, Section [WriteInstallationResultMessage], Line 1:
ErrorLogMsg: Initialization failed!
Communication with Matrix42.Platform.Service.Host (UAF) is not available!
Agent template not compatible! or
Cannot download the catalog from the server! or
Check Windows Update Service, please!
If you check the log files in the C:\EmpirumAgent\PatchManagement_v3 folder you will see this:
2017-06-15 15:29:07.825 [PM3Client] Downloading Shavlik Catalogs...
2017-06-15 15:29:07.825 [PM3Download] Starting enumerate job, server uri: https://EMPIRUM.coserv.com:443/Matrix42 ... r/Packages, relative path: PatchManagement_v3\Catalog
2017-06-15 15:29:07.825 [PM3Download] Got value False for Key Matrix42.Platform.Service.Processor.Transfer.AcceptOnlyTrustedSsl
2017-06-15 15:29:07.825 [PM3Download] Got value False for Key Matrix42.Platform.Service.Processor.Transfer.UseClientCertificate
2017-06-15 15:29:07.825 [PM3Download] Got value for Key Server.ClientCertificateSerial
2017-06-15 15:29:09.028 [PM3Download] Enumerate job failed, https://empirum.coserv.com/Matrix42-Emp ... v3/Catalog. The remote server returned an error: (403) Forbidden.
Since the Shavlik catalog files cant be downloaded, extracted, and checked against by the scan mechanism the distribution failes. If the same system connects to the internal depot server there are no issues. The catalog files get pulled down to the system and all runs as expected.
it is confusing that the agent can download everything else but when it comes to the 2 catalog files it acts like it does not have access. Anyone seen this before with a DMZ depot?